~/talk

Optimizing Telemetry Collection & Resource Utilization

Talkat osquery@scale 2020 · on Wednesday, 2020-01-22· [security, observability]
name:Uma Reddy
links:none on file
links:none on file
slides:none on file

Describes enhancements to osquery that reduce CPU/memory impact while increasing the amount of telemetry collected in production. Covers engineering changes and optimizations Uptycs made to lower osquery’s resource utilization for large-scale deployments.

AI-written summary · about

  1. 0:00Start
  2. 10:39Production grade capture of system events
  3. 16:39Watchdog process improvements
  4. 18:39Heartbeat monitoring
  5. 19:06Reuse of HTTP Connections for massive scalability
  6. 21:30HTTP Proxy Support
  7. 22:34Osquery autoupgrade
  8. 23:45Miscellaneous
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.